This is a good idea. However, I would be a little more lenient and allow some access through a proxy that I would give some applications access to.

You've written a nice piece and I agree wholeheartedly with everything apart from "Lennart Poettering is a fine programmer".